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INTRODUCTION 


This  Validation  Summary  Report  describes  the  extent  to  which  a 
specific  Ada  compiler  conforms  to  the  Ada  Standard,  ANSI/MIL-STD-1815A. 
This  report  explains  all  technical  terms  used  within  it  and  thoroughly 
reports  the  results  og,  tasting  this  compiler  using  the  Ada  Compiler 
Validation  Capability  CO .  An  Ada  compiler  must  be  implemented 
according  to  the  Ada  Standard,  and  any  implementation-dependent  features 
must  conform  to  the  requirements  of  the  Ada  Standard.  The  Ada  Standard 
must  be  implemented  in  its  entirety,  and  nothing  can  be  implemented  that  is 
not  in  the  Standard  .~\ 


Even  though  all  validated  Ada  compilers  conform  to  the  Ada  Standard,  it 
must  be  understood  that  some  differences  do  exist  between  implementations. 
The  Ada  Standard  permits  some  implementation  dependencies — for  example,  the 
maximum  length  of  identifiers  or  the  maximum  values  of  integer  types. 
Other  differences  between  compilers  result  from  the  characteristics  of 
particular  operating  systems,  hardware,  or  implementation  strategies.  All 
the  dependencies  observed  during  the  process  of  testing  this  compiler  are 
given  in  this  report 

The  information  in  this  report  is  derived  from  the  test  results  produced 
during  validation  testing.  The  validation  process  includes  submitting  a 
suite  of  standardized  tests,  the  ACVC,  as  inputs  to  an  Ada  compiler  and 
evaluating  the  results.  '''The  purpose  of  validating  is  to  ensure  conformity 
of  the  compiler  to  the  Ada  Standard  by  testing  that  the  compiler  properly 
implements  legal  language  constructs  and  that  it  identifies  and  rejects 
illegal  language  constructs.  The  testing  also  identifies  behavior  that  is 
implementation  dependent  but  permitted  by  the  Ada  Standard.  Six  classes  of 
tests  are  used.  These  tests  are  designed  to  perform  checks  at  compile 
time,  at  link  time,  and  during  execution. 

X 
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1.1  PURPOSE  OF  THIS  VALIDATION  SUMMARY  REPORT 

This  VSR  documents  the  results  of  the  validation  testing  performed  on  an 
Ada  compiler.  Testing  was  carried  out  for  the  following  purposes: 

.  To  attempt  to  identify  any  language  constructs  supported  by  the 
compiler  that  do  not  conform  to  the  Ada  Standard 

.  To  attempt  to  identify  any  language  constructs  not  supported  by 
the  compiler  but  required  by  the  Ada  Standard 

.  To  determine  that  the  implementation-dependent  behavior  is  allowed 
by  the  Ada  Standard 


Testing  of  this  compiler  was  conducted  by  SofTech,  Inc.  under  the 
direction  of  the  AVF  according  to  procedures  established  by  the  Ada  Joint 
Program  Office  and  administered  by  the  Ada  Validation  Organization  (AVO). 
On-site  testing  was  completed  4  May  1 988  at  Santa  Clara,  CA. 


1.2  USE  OF  THIS  VALIDATION  SUMMARY  REPORT 

Consistent  with  the  national  laws  of  the  originating  country,  the  AVO  may 
make  full  and  free  public  disclosure  of  this  report.  In  the  United  States, 
this  is  provided  in  accordance  with  the  "Freedom  of  Information  Act"  (5 
U.S.C.  #552).  The  results  of, this  validation  apply  only  to  the  computers, 
operating  systems,  and  compiler  versions  identified  in  this  report. 

The  organizations  represented  on  the  signature  page  of  this  report  do  not 
represent  or  warrant  that  all  statements  set  forth  in  this  report  are 
accurate  and  complete,  or  that  the  subject  compiler  has  no  nonconformities 
to  the  Ada  Standard  other  than  those  presented .  Copies  of  this  report  are 
available  to  the  public  from: 

Ada  Information  Clearinghouse 
Ada  Joint  Program  Office 
OUSDRE 

The  Pentagon,  Rm  3D- 139  (Fern  Street) 

Washington  DC  20301-3081 


or  from: 


Ada  Validation  Facility 
ASD/SCEL 

Wright-Patterson  AFB  OH  45433-6503 
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Questions  regarding  this  report  or  the  validation  test  results  should  be 
directed  to  the  AVF  listed  above  or  to: 

Ada  Validation  Organization 
Institute  for  Defense  Analyses 
1801  North  Beauregard  Street 
Alexandria  VA  22311 


1.3  REFERENCES 


1 .  Reference  Manual  for  the  Ada  Programming  Language , 

ANSI/MIL-STD- 1 8 1 5  A ,  February  1983  and  ISO  8652-1987. 

2.  Ada  Compiler  Validation  Procedures  and  Guidelines ,  Ada  Joint 
Program  Office,  1  January  1987. 

3.  Ada  Compiler  Validation  Capability  Implementers’  Guide,  SofTech, 
Inc.,  December  1986. 

4.  Ada  Compiler  Validation  Capability  User's  Guide ,  December  1986. 


1.4  DEFINITION  OF  TERMS 


A CVC  The  Ada  Compiler  Validation  Capability.  The  set  of  Ada 

programs  that  tests  the  conformity  of  an  Ada  compiler  to  the 
Ada  programming  language . 

Ada  An  Ada  Commentary  contains  all  information  relevant  to  the 

Commentary  point  addressed  by  a  comment  on  the  Ada  Standard.  These 
comments  are  given  a  unique  identification  number  having  the 
form  Al-ddddd. 

Ada  Standard  ANSI/MIL-STD- 1 81 5A,  February  1983  and  ISO  8652-1987. 

Applicant  The  agency  requesting  validation. 

AVF  The  Ada  Validation  Facility.  The  AVF  is  responsible  for 

conducting  compiler  validations  according  to  procedures 
contained  in  the  Ada  Compiler  Validation  Procedures  and 
Guidelines . 

AVO  The  Ada  Validation  Organization.  The  AVO  has  oversight 

authority  over  all  AVF  practices  for  the  purpose  of 
maintaining  a  uniform  process  for  validation  of  Ada 
compilers.  The  AVO  provides  administrative  and  technical 
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support  for  Ada  validations  to  ensure  consistent  practices. 

Compiler  A  processor  for  the  Ada  language.  In  the  context  of  this 

report,  a  compiler  is  any  language  processor,  including 
cross-compilers,  translators,  and  interpreters. 

Failed  test  An  ACVC  test  for  which  the  compiler  generates  a  result  that 
demonstrates  nonconformity  to  the  Ada  Standard. 

Host  The  computer  on  which  the  compiler  resides. 

Inapplicable  An  ACVC  test  that  uses  features  of  the  language  that  a 

test  compiler  is  not  required  to  support  or  may  legitimately 

support  in  a  way  other  than  the  one  expected  by  the  test . 

Passed  test  An  ACVC  test  for  which  a  compiler  generates  the  expected 

result . 

Target  The  computer  for  which  a  compiler  generates  code. 

Test  A  program  that  checks  a  compiler’s  conformity  regarding  a 

particular  feature  or  a  combination  of  features  to  the  Ada 
Standard.  In  the  context  of  this  report,  the  term  is  used  to 
designate  a  single  test,  which  may  comprise  one  or  more 
files. 

An  ACVC  test  found  to  be  incorrect  and  not  used  to  check 
conformity  to  the  Ada  Standard.  A  test  may  be  incorrect 
because  it  has  an  invalid  test  objective,  fails  to  meet  its 
test  objective,  or  contains  illegal  or  erroneous  use  of  the 
language . 


1.5  ACVC  TEST  CLASSES 

Conformity  to  the  Ada  Standard  is  measured  using  the  ACVC.  The  ACVC 
contains  both  legal  and  illegal  Ada  programs  structured  into  six  test 
classes:  A,  3,  C,  D,  E,  and  L.  The  first  letter  of  a  test  name  identifies 
the  class  to  which  it  belongs.  Class  A,  C,  D,  and  S  tests  are  executable, 
and  special  program  units  are  used  to  report  their  results  during 
execution.  Class  3  tests  are  expected  to  produce  compilation  errors. 
Class  L  tests  are  expected  to  produce  compilation  or  link  errors. 

Class  A  tests  check  that  legal  Ada  programs  can  be  successfully  compiled 
and  executed.  There  are  no  explicit  program  components  in  a  Class  A  test 
to  check  semantics.  For  example,  a  Class  A  test  checks  that  reserved  words 
of  another  language  (other  than  those  already  reserved  in  the  Ada  language) 
are  not  treated  as  reserved  words  by  an  Ada  compiler.  A  Class  A  test  is 
passed  if  no  errors  are  detected  at  compile  time  and  the  program  executes 
to  produce  a  PASSED  message. 


Withdrawn 

test 
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Class  B  tests  check  that  a  compiler  detects  illegal  language  usage.  Class 
B  tests  are  not  executable.  Each  test  in  this  class  is  compiled  and  the 
resulting  compilation  listing  is  examined  to  verify  that  every  syntax  or 
semantic  error  in  the  test  is  detected.  A  Class  B  test  is  passed  if  every 
illegal  construct  that  it  contains  is  detected  by  the  compiler. 

Class  C  tests  check  that  legal  Ada  programs  can  be  correctly  compiled  and 
executed.  Each  Class  C  test  is  self-checking  and  produces  a  PASSED, 
FAILED,  or  NOT  APPLICABLE  message  indicating  the  result  when  it  is 
executed . 

Class  D  test3  check  the  compilation  and  execution  capacities  of  a  compiler. 
Since  there  are  no  capacity  requirements  placed  on  a  compiler  by  the  Ada 
Standard  for  some  parameters — for  example,  the  number  of  identifiers 
permitted  in  a  compilation  or  the  number  of  units  in  a  library — a  compiler 
may  refuse  to  compile  a  Class  D  test  and  still  be  a  conforming  compiler. 
Therefore,  if  a  Class  D  test  fails  to  compile  because  the  capacity  of  the 
compiler  is  exceeded,  the  test  is  classified  as  inapplicable.  If  a  Class  D 
test  compiles  successfully,  it  is  self-checking  and  produces  a  PASSED  or 
FAILED  message  during  execution. 

Each  Class  E  test  is  self-checking  and  produces  a  NOT  APPLICABLE,  PASSED, 
or  FAILED  message,  when  it  is  compiled  and  executed.  However,  the  Ada 
Standard  permits  an  implementation  to  reject  programs  containing  some 
features  addressed  by  Class  E  tests  during  compilation.  Therefore,  a  Class 
E  test  is  passed  by  a  compiler  if  it  is  compiled  successfully  and  executes 
to  produce  a  PASSED  message,  or  if  it  is  rejected  by  the  compiler  for  an 
allowable  reason. 

Class  L  tests  check  that  incomplete  or  illegal  Ada  programs  involving 
multiple,  separately  compiled  units  are  detected  and  not  allowed  to 
execute.  Class  L  tests  are  compiled  separately  and  execution  is  attempted. 
A  Class  L  test  passes  if  it  is  rejected  at  link  time— that  is,  an  attempt 
to  execute  the  main  program  must  generate  an  error  message  before  any 
declarations  in  the  main  program  or  any  units  referenced  by  the  main 
program  are  elaborated. 

Two  library  units,  the  package  REPORT  and  the  procedure  CHECK_FILE,  support 
the  self-checking  features  of  the  executable  tests.  The  package  REPORT 
provides  the  mechanism  by  which  executable  tests  report  PASSED,  FAILED,  or 
NOT  APPLICABLE  results.  It  also  provides  a  set  of  identity  functions  used 
to  defeat  some  compiler  optimizations  allowed  by  the  Ada  Standard  that 
would  circumvent  a  test  objective.  The  procedure  CHECK_FILE  is  used  to 
check  the  contents  of  text  files  written  by  some  of  the  Class  C  tests  for 
chapter  of  the  Ada  Standard.  The  operation  of  REPORT  and  CHECK_FILE  is 
checked  by  a  set  of  executable  tests.  These  tests  produce  messages  that 
are  examined  to  verify  that  the  units  are  operating  correctly.  If  these 
units  are  not  operating  correctly,  then  the  validation  is  not  attempted. 

The  text  of  the  tests  in  the  ACVC  follow  conventions  that  are  intended  to 
ensure  that  the  tests  are  reasonably  portable  without  modification.  For 
example,  the  tests  make  use  of  only  the  basic  set  of  55  characters,  contain 
lines  with  a  maximum  length  of  72  characters,  use  small  nume-ic  values,  and 
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place  features  that  may  not  be  supported  by  all  implementations  in  separate 
tests.  However,  some  tests  contain  values  that  require  the  test  to  be 
customized  according  to  implementation-specific  values — for  example,  an 
illegal  file  name.  A  list  of  the  values  used  for  this  validation  is 
provided  in  Appendix  C. 

A  compiler  must  correctly  process  each  of  the  tests  in  the  suite  and 
demonstrate  conformity  to  the  Ada  Standard  by  either  meeting  the  pass 
criteria  given  for  the  test  or  by  showing  that  the  test  is  inapplicable  to 
the  implementation.  The  applicability  of  a  test  to  an  implementation  is 
considered  each  time  the  implementation  is  validated.  A  test  that  is 
inapplicable  for  one  validation  is  not  necessarily  inapplicable  for  a 
subsequent  validation.  Any  test  that  was  determined  to  contain  an  illegal 
language  construct  or  an  erroneous  language  construct  is  withdrawn  from  the 
ACVC  and,  therefore,  is  not  used  in  testing  a  compiler.  The  tests 
withdrawn  at  the  time  of  this  validation  are  given  in  Appendix  D. 


1-6 


CHAPTER  2 


CONFIGURATION  INFORMATION 

2.1  CONFIGURATION  TESTED 

The  candidate  compilation  system  for  this  validation  was  tested  under  the 
following  configuration: 

Compiler:  Rational  Environment  ,  Version  D_10_8_6 
ACVC  Version:  1.9 

Certificate  Number:  8S0503W1 .09048 

Host  Computer: 

Machine:  R1000  Series  200 

Operating  System:  Rational  Environment 

Version  D_10_8_6 

Memory  Size:  32  Megabytes 

Target  Computer: 

Machine:  R1000  Series  200 

Operating  System:  Rational  Environment 

Version  D_10_8_6 

Memory  Size:  32  Megabytes 
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2.2  IMPLEMENTATION  CHARACTERISTICS 

One  of  the  purposes  of  validating  compilers  is  to  determine  the  behavior  of 
a  compiler  in  those  areas  of  the  Ada  Standard  that  permit  implementations 
to  differ.  Class  D  and  E  tests  specifically  check  for  such  implementation 
differences.  However,  tests  in  other  classes  also  characterize  an 
implementation.  The  tests  demonstrate  the  following  characteristics: 


.  Capacities. 

The  compiler  correctly  processes  tests  containing  loop  statements 
nested  to  65  levels,  block  statements  nested  to  14  levels,  and 
recursive  procedures  separately  compiled  as  subunits  nested  to  10 
levels.  It  correctly  processes  a  compilation  containing  723 
variables  in  the  same  declarative  part.  (See  tests  D55A03A. .H  (8 
te3t3),  D560013,  D64005E..G  (3  tests),  and  D29002K.) 


.  Universal  integer  calculations. 

An  implementation  is  allowed  to  reject  universal  integer 
calculations  having  values  that  exceed  SYSTEM. MAXJLNT.  This 
implementation  processes  64  bit  integer  calculations.  However,  if 
the  result  requires  64  bits,  the  calculations  are  rejected.  (See 
tests  D4A002A,  D4A002B,  D4A004A,  and  D4A004B.) 


.  Predef ined  types . 

This  implementation  supports  the  additional  predefined  type 
LONG_INTEGER  in  the  package  STANDARD.  (See  tests  B86001C  and 
B86001D.) 


.  Based  literals. 

An  implementation  is  allowed  to  reject  a  based  literal  with  a 
value  exceeding  SYSTEM.MAX_INT  during  compilation,  or  it  may  raise 
NUMERIC_ERROR  or  CONSTRAINT_ERROR  during  execution.  Thi3 
implementation  rejects  the  test  during  compilation.  (See  test 
E24101A.) 


.  Expression  evaluation. 

Apparently  some  default  initialization  expressions  for  record 
components  a r3  evaluated  before  any  value  is  checked  to  belong  to  . 
a  component’s  subtype.  (See  test  C32117A.) 

Assignments  for  subtypes  are  performed  with  the  same  precision  as 
the  base  type.  (See  te3t  C35712B.) 
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This  implementation  uses  no  extra  bits  for  extra  precision.  This 
implementation  uses  all  extra  bits  for  extra  range.  (See  test 
C35903A.) 

Sometimes  NUMERIC_ERROR  is  raised  when  a  literal  operand  in  a 
fixed-point  comparison  or  membership  test  is  outside  the  range  of 
the  base  type.  (See  test  C45252A.) 

Apparently,  underflow  is  not  gradual.  (See  tests  C45524A..Z.) 


Rounding . 

The  method  used  for  rounding  to  integer  is  apparently  round  away 
from  zero  (See  tests  C46012A. .Z.) . 

The  method  used  for  rounding  to  longest  integer  is  apparently 
round  away  from  zero.  (See  tests  C46012A..Z.) 

The  method  used  for  rounding  to  integer  in  static  universal  real 
expressions  is  apparently  round  away  from  zero.  (See  test 
C4A014A.) 


Array  types. 

An  implementation  is  allowed  to  raise  NUMERIC_ERROR  or 
CONSTRAINT_ERROR  for  an  array  having  a  ’LENGTH  that  exceeds 
STANDARD . INTEGER ’ LAST  and/or  SYSTEM. MAX_INT.  For  this 
implementation : 

Declaration  of  an  array  type  or  subtype  declaration  with  more  than 
SYSTEM.  MAX_INT  components  raises  NUMERIC_ERROR.  (See  test 
C36003A.) 

No  exception  is  raised  when  ’LENGTH  is  applied  to  an  array  type 
with  INTEGER’LAST  +  2  components.  (See  test  C36202A.) 

No  exception  is  raised  when  ’LENGTH  is  applied  to  an  array  type 
with  SYSTEM .MAX_INT  +  2  components.  NUMERIC_ERROR  is  raised  when 
an  array  type  with  SYSTEM. MAX_INT  +  2  components  is  declared. 
(See  test  C362Q2B.) 

A  packed  BOOLEAN  array  having  a  ’LENGTH  exceeding  INTEGER’LAST 
raises  STORAGE  ERROR  when  the  array  objects  are  declared.  (See 
test  C52103X.) 

A  packed  two-dimensional  BOOLEAN  array  with  more  than  INTEGER 'LAST 
components  raises  CONSTRAINT_SRROR  when  the  length  of  a  dimension 
is  calculated  and  exceeds  INTEGER’LAST.  (See  test  C52104Y.) 
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A  null  array  with  one  dimension  of  length  greater  than 
INTEGER ’LAST  may  raise  NUMERIC_ERROR  or  CONSTRAINT_ERROR  either 
when  declared  or  assigned.  Alternatively,  an  implementation  may 
accept  the  declaration.  However,  lengths  must  match  in  array 
slice  assignments.  This  implementation  raises  no  exception.  (See 
test  E52103Y.) 

In  assigning  one-dimensional  array  types,  the  expression  appears 
to  be  evaluated  in  its  entirety  before  CONSTRAINT_ERROR  is  raised 
when  checking  whether  the  expression's  subtype  is  compatible  with 
the  target's  subtype.  In  assigning  two-dimensional  array  types, 
the  expression  does  not  appear  to  be  evaluated  in  its  entirety 
before  CONSTRAINT_ERROR  is  raised  when  checking  whether  the 
expression's  subtype  is  compatible  with  the  target's  subtype. 
(See  test  C52013A.) 


.  Discriminated  types . 

During  compilation,  an  implementation  is  allowed  to  either  accept 
or  reject  an  incomplete  type  with  discriminants  that  i3  used  in  an 
access  type  definition  with  a  compatible  discriminant  constraint. 
This  implementation  accepts  such  subtyoe  indications.  (See  test 
E3810UA.) 

In  assigning  record  types  with  discriminants,  the  expression 
appears  to  be  evaluated  in  its  entirety  before  CONSTRAINT_ERROR  is 
raised  when  checking  whether  the  expression's  subtype  is 
compatible  with  the  target's  subtype.  (See  test  C52013A.) 


.  Aggregates . 

In  the  evaluation  of  a  multi-dimensional  aggregate,  all  choices 
appear  to  be  evaluated  before  checking  against  the  index  type. 
(See  tests  C43207A  and  C43207B.) 

In  the  evaluation  of  an  aggregate  containing  subaggregates,  not 
all  choices  are  evaluated  before  being  checked  for  identical 
bounds.  (See  test  E43212B.) 

Not  all  choices  are  evaluated  before  CONSTRAINT_ERROR  is  raised  if 
a  bound  in  a  nonnull  range  of  a  nonnull  aggregate  does  not  belong 
to  an  index  subtype.  (See  test  E43211B.) 


.  Representation  clauses. 

An  implementation  might  legitimately  place  restrictions  on 
representation  clauses  used  by  some  of  the  tests.  If  a 
representation  clause  is  used  by  a  test  in  a  way  that  violates  a 
restriction,  then  the  implementation  must  reject  it. 
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Enumeration  representation  clauses  containing  noncontiguous  values 
for  enumeration  types  other  than  character  and  boolean  types  are 
not  supported.  (See  tests  C35502I..J,  C35502M..N,  and  A39005F.) 

Enumeration  representation  clauses  containing  noncontiguous  values 
for  character  types  are  not  supported.  (See  tests  C35507I..J* 
C35507M..N,  and  C55B16A.) 

Enumeration  representation  clauses  for  boolean  types  containing 
representational  values  other  than  (FALSE  =>  0,  TRUE  =>  1)  are  not 
supported.  (See  tests  C35508I..J  and  C35508M..M.) 

Length  clauses  with  SIZE  specifications  for  enumeration  types  are 
supported.  (See  test  A39005B.) 

Length  clauses  with  STORAGE_SIZE  specifications  for  access  types 
are  not  supported.  (See  tests  A39005C  and  C87B623.) 

Length  clauses  with  STORAGE__SIZE  specifications  for  task  types  are 
not  supported.  (See  tests  A39005D  and  C87B62D.) 

Length  clauses  with  SMALL  specifications  are  not  supported.  (See 
tests  A39005E  and  C87B62C.) 

Record  representation  clauses  are  not  supported.  (See  test 
A39005G.) 

Length  clauses  with  SIZE  specifications  for  derived  integer  types 
are  supported.  (See  teat  C87B62A.) 


Pragmas . 

The  pragma  INLINE  is  not  supported  for  procedures  or  functions . 
(See  tests  LA3004A,  LA30043,  EA3004C,  EA3004D,  CA3004S,  and 
CA3004F.) 


Input/output . 

The  package  SEQUENTIAL_I0  can  be  instantiated  with  unconstrained 
array  types  and  record  types  with  discriminants  without  defaults. 
(See  tests  AE2101C,  EE2201D,  and  EE2201E.) 

The  package  DIRECT_I0  cannot  be  Instantiated  with  unconstrained 
array  types  and  record  types  with  discriminants  without  defaults. 
(See  tests  AE2101H,  ES2401D,  and  EE2401G.) 

There  are  strings  which  are  illegal  external  file  names  for 
SEQUENTIAL  10  and  DIRECT  10.  (See  tests  CE2102C  and  CE2102H.) 
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Modes  IN_FILE  and  0UT_FILE  are  supported  for  SEQUENTIAL_IO .  (See 
tests  CE2102D  and  CE2T02E.) 

Modes  IN_FILE,  OUT_FILE,  and  INOUT_FILE  are  supported  for 
DIRECT_IO.  (See  tests  CE2102F,  CE2102I,  and  CE2102J.) 

RESET  and  DELETE  are  supported  for  SEQUENTIALJCO  and  DIRECT_I0. 
(See  tests  CE2102G  and  CE2102K.) 

Dynamic  creation  and  deletion  of  files  are  supported  for 
SEQUENTIALJCO  and  DIRECT_IO.  (See  tests  CE2106A  and  CE2T06B. ) 

Overwriting  to  a  sequential  file  truncates  the  file  to  last 
element  written.  (See  test  CE22083.) 

An  existing  text  file  can  be  opened  in  OUT__FILE  mode,  can  be 
created  in  OUT  FILE  mode,  and  can  be  created  in  INJFILE  mode. 
(See  test  EE3102C.) 

More  than  one  internal  file  can  be  associated  with  each  external 
file  for  text  I/O  for  reading  only.  (See  test3  CE31HA..E  (5 
tests),  CE3114B,  and  CE3115A.) 

More  than  one  internal  file  can  be  associated  with  each  external 
file  for  sequential  I/O  for  reading  only.  (See  tests  CE2107A..D 
(4  tests),  CE2110B,  and  CE2111D.) 

More  than  one  internal  file  can  be  associated  with  each  external 
file  for  direct  I/O  for  reading  only.  (See  tests  CE2107F..I  (5 
tests),  CE2110B,  and  CE2111H.) 

An  internal  sequential  access  file  and  an  internal  direct  access 
file  cannot  be  associated  with  a  single  external  file  for  writing. 
(See  test  CE2107E.) 

An  external  file  associated  with  more  than  one  internal  file 
cannot  be  deleted  for  SEQUENTIAL  10,  DIRECT_I0,  and  TEXT_I0.  (See 
test  CE2110B.) 

Temporary  sequential  files  and  temporary  direct  files  are  given 
names.  Temporary  files  given  names  are  not  deleted  when  they  are 
closed.  (See  tests  CE2108A  and  CE2108C.) 


.  Generics . 

Generic  subprogram  declarations  and  bodies  can  be  compiled  in 

separate  compilations.  (See  tests  CA1012A  and  CA2009F.) 

Generic  package  declarations  and  bodies  can  be  compiled  in 

separate  compilations.  (See  tests  CA2009C,  BC3204C,  and  3C3205D.) 
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Generic  unit  bodies  and  their  subunits  can  be  compiled  in  separate 
compilations.  (See  test  CA3011A.) 
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3.1  TEST  RESULTS 

Version  1.9  of  the  ACVC  comprises  3122  tests.  When  this  compiler  was 
tested ,  27  tests  had  been  withdrawn  because  of  test  errors.  The  AVF 

determined  that  275  tests  were  inapplicable  to  this  implementation.  All 
inapplicable  tests  were  processed  during  validation  testing  except  for  201 
executable  tests  that  use  floating-point  precision  exceeding  that  supported 
by  the  implementation  and  21  executable  tests  that  use  file  operations  not 
supported  by  the  implementation.  Modifications  to  the  code,  processing,  or 
grading  for  86  tests  were  required  to  successfully  demonstrate  the  test 
objective.  (See  section  3*6.) 

Hie  AVF  concludes  that  the  testing  results  demonstrate  acceptable 
conformity  to  the  Ada  Standard, 


3.2  SUMMARY  OF  TEST  RESULTS  BY  CLASS 


RESULT 

A 

TEST  CLASS 
BCD 

E 

L 

TOTAL 

Passed 

104 

1048 

1596 

14 

14 

44 

2820 

Inapplicable 

6 

3 

257 

3 

4 

2 

275 

Withdrawn 

3 

2 

21 

0 

1 

0 

27 

TOTAL 

113 

1053 

1874 

17 

19 

46 

3122 
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3.3  SUMMARY  OF  TEST  RESULTS  BY  CHAPTER 


RESULT 

2  _J. 

4 

5 

6 

CHAPTER 

7  8  9 

10 

11 

12 

J1 

14 

TOTAL 

Passed 

190  482 

541 

243 

165 

98  139  326 

131 

36  234 

3 

232 

2820 

Inapplicable 

14  90 

133 

5 

1 

0  4  1 

6 

0 

0 

0 

21 

275 

Withdrawn 

2  14 

3 

0 

0 

1  2  0 

0 

0 

2 

1 

2 

27 

TOTAL 

206  586 

677 

248 

166 

99  145  327 

137 

36  236 

4 

255 

3122 

3.4  WITHDRAWN  TESTS 

The  following  27  tests  were  withdrawn  from  ACVC  Version  1.9  at  the  time  of 
this  validation: 


B28003A 

E28005C 

C34004A 

C35502P 

A35902C 

C  35  904 A 

C35904B 

C35A03E 

C35A03R 

C37213H 

C37213J 

C37215C 

C37215E 

C37215G 

C37215H 

C38102C 

C41402A 

C45332A 

C45614C 

A74106C 

C85018B 

C87B04B 

CC1311B 

BC3105A 

ADI  A0 1 A 

CE2401H 

CE3208A 

See  Appendix  D  for  the  reason  that  each  of  these  tests  was  withdrawn. 


3.5  INAPPLICABLE  TESTS 

Some  tests  do  not  apply  to  all  compilers  because  they  make  use  of  features 
that  a  compiler  is  not  required  by  the  Ada  Standard  to  support.  Others  may 
depend  on  the  result  of  another  test  that  is  either  inapplicable  or 
withdrawn.  The  applicability  of  a  test  to  an  implementation  is  considered 
each  time  a  validation  is  attempted.  A  test  that  is  inapplicable  for  one 
validation  attempt  is  not  necessarily  inapplicable  for  a  subsequent 
attempt.  For  this  validation  attempt,  275  tests  were  inapplicable  for  the 
reasons  indicated: 


.  C35502I..J  (2  tests),  C35502M..N  (2  tests),  C35507I..J  (2  tests), 

C35507M..N  (2  tests),  C35508I..J  (2  tests),  C35508M..N  (2  tests), 

A39005F,  and  C55B16A  use  enumeration  representation  clauses  which 
are  not  supported  by  this  compiler. 
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C35702A  uses  SHORT_FLOAT 
implementation. 

which 

is 

not 

supported 

by 

this 

C35702B  uses  LONGJFLOAT 
implementation. 

which 

is 

not 

supported 

by 

this 

A39005C..D  (2  testa),  C87B62B  and  C87B62D  use  length  clauses  with 
ST0RAG£_S IZE  specifications  for  access  types  or  for  task  types 
which  are  not  supported  by  this  implementation. 

A39005E  and  C87B62C  use  length  clauses  with  SMALL  specifications 
which  are  not  supported  by  this  implementation. 

A39005G  uses  a  record  representation  clause  which  is  not  supported 
by  this  compiler. 

The  following  tests  use  SHORT_INTEGER,  which  is  not  supported  by 
this  compilers 

C45231B  C45304B  C45502B  C45503B  C45504B 
C45504E  C45611B  C45613B  C45614B  C45631B 
C45632B  B52004E  C55B07B  B55B09D 

C45231B  and  B86001D  require  a  macro  substitution  for  any 
predefined  numeric  types  other  than  INTEGER,  SHORT_INTEGER , 
LONG_INTEGER,  FLOAT,  SHORT_FLOAT,  and  LONG_FLOAT.  This  compiler 
does  not  support  any  such  types. 

C45232A  and  D4A004B  use  integer  literals  and  universal  integer 
expressions  whose  values  exceed  SY STEM . MAX_INT ,  for  which  this 
implementation  issues  a  compile-time  err orT  Because  of  the 
ambiguity  in  the  Ada  standard  regarding  universal  integer  values, 
the  AVO  accepts  this  behavior  until  the  language  maintenance  body 
issues  a  clarifying  ruling;  the  tests  are  therefore  ruled  not 
applicable  to  this  implementation. 

C45304A  and  C45504A  both  check  to  see  that  an  exception  is  raised 
when  an  integer  result  is  outside  the  range  INTEGER'FIRST  .. 
INTEGER' LAST.  The  R1000  Ada  implementation  will  not  raise  this 
exception  since  it  performs  the  calculations  using  a  wider  range 
and  then  converts  the  value  to  a  floating  point  value  and  makes 
the  assignment  correctly. 

C4A013B  uses  a  static  value  that  is  within  the  range  of  the  most 
accurate  floating-point  base  type,  and  ' MACHINE_OVERFLOWS  is  false 
for  this  type.  The  test  is  rejected  at  compile  time. 

D56001B  uses  65  levels  of  block  nesting  which  exceeds  the  capacity 
of  the  compiler. 

D64005G  uses  nested  procedures  as  subunits  to  a  level  of  17,  which 
exceeds  the  capacity  of  the  compiler. 
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.  C92005B  is  inapplicable  since  the  R1000  Ada  implementation  raises 

CONSTRAINT_ERROR  instead  of  the  expected  exception. 
CONSTRAINT__ERROR  is  not  handled  in  the  test  and  is  propagated  all 
the  way  out,  thereby  terminating  the  test. 

.  CA3004E,  EA3004C,  and  LA3004A  use  the  INLINE  pragma  for 

procedures,  which  is  not  supported  by  this  compiler. 

.  CA3004F,  EA3004D,  and  LA3004B  use  the  INLINE  pragma  for  functions, 

which  is  not  supported  by  this  compiler. 

.  AE2101H,  EE2401D,  and  EE2401G  use  instantiations  of  package 

DIRECT_IO  with  unconstrained  array  types  and  record  types  having 
discriminants  without  defaults.  These  instantiations  are  rejected 
by  this  compiler. 

Results  of  running  a  subset  of  these  tests  showed  that  the  proper 
exceptions  are  raised  for  unsupported  file  operations. 

.  CE2107B..E  (4  tests),  CE2107G..I  (3  tests),  CE2110B,  CE2111D, 

CE2111H,  CE3111B..E  (4  tests),  CE3114B,  and  CE3115A  are 

inapplicable  because  multiple  internal  files  cannot  be  associated 
with  the  same  external  file,  except  for  read-only  files.  The 
proper  exception  is  raised  when  multiple  access  is  attempted. 

.  CE2201A  and  CE2401B  are  inapplicable  because  I/O  of  access  types 

is  not  supported. 

.  The  following  201  tests  require  a  floating-point  accuracy  that 
exceeds  the  maximum  of  15  digits  supported  by  this  implementation: 

C24113L. .Y  (14  tests)  C35705L. .Y  (14  tests) 

C35706L..Y  (14  tests)  C35707L. .Y  (14  tests) 

C35708L..Y  (14  tests)  C35802L. .Z  (15  tests) 

C45241L..Y  (14  tests)  C45321L..Y  (14  tests) 

C45421L..Y  (14  tests)  C45521L..Z  (15  tests) 

C45524L..Z  (15  tests)  C45621L..Z  (15  tests) 

C45641L. .Y  (14  tests)  C46012L..Z  (15  tests) 


3.6  TEST,  PROCESSING,  AND  EVALUATION  MODIFICATIONS 

It  is  expected  that  some  tests  will  require  modifications  of  code, 
processing,  or  evaluation  in  order  to  compensate  for  legitimate 
implementation  behavior.  Modifications  are  made  by  the  AVF  in  cases  where 
legitimate  implementation  behavior  prevents  the  successful  completion  of  an 
(otherwise)  applicable  test.  Examples  of  such  modifications  include: 
adding  a  length  clause  to  alter  the  default  size  of  a  collection;  splitting 
a  Class  3  test  into  subtests  so  that  all  errors  are  detected;  and 
confirming  that  messages  produced  by  an  executable  test  demonstrate 
conforming  behavior  that  wasn't  anticipated  by  the  test  (such  as  raising 
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one  exception  instead  of  another ) . 

Modifications  were  required  for  85  Class  B  tests  and  1  Class  C  test. 

The  following  Class  B  tests  were  split  because  syntax  errors  at  one  point 
resulted  in  the  compiler  not  detecting  other  errors  in  the  test: 


B22003A 

B22004A 

B22004B 

B22004C 

B23004A 

B23004C 

B24001A 

B24001B 

B24001C 

B24005A 

B24005B 

B24007A 

B24009A 

B24204A 

B24204B 

B24204C 

B25002B 

B26001A 

B26002A 

B26005A 

B28003A 

B29001A 

B2A003A 

B2A003B 

B2A003C 

B2A007A 

B32103A 

B33201B 

B33202B 

B33203B 

B33301A 

B35101A 

B36002A 

B36201A 

B37201 A 

B37205A 

B37212A 

B37301J 

B37307B 

B38001C 

B38003A 

B38003B 

B38009A 

B38009B 

B41201A 

B41202A 

B44001A 

B44004C 

B45205A 

B48002A 

B48002D 

B51001A 

B51003A 

B51003B 

B53003A 

B54 AO  1C 

B54A01D 

B54A01E 

B55A01A 

B64001A 

B64006A 

B67001A 

B67001B 

B67001C 

B67001D 

B74003A 

B91001H 

B91003B 

B95001 A 

B95003A 

B95004A 

B95007B 

B95079A 

B97101A 

B97101E 

B97102A 

B97103E 

BB3005A 

BC1303F 

BC2001D 

BC2001E 

BC3003A 

BC3003B 

BC3005B 

BC3013A 

C45651A  requires  that  the  result  of  the  expression  in  line  227  be  in  the 
range  given  in  line  228}  however,  this  range  excludes  some  acceptable 
results.  This  implementation  passes  all  other  checks  of  this  test,  and  the 
AVO  ruled  that  the  test  is  passed . 


3.7  ADDITIONAL  TESTING  INFORMATION 
3.7.1  Prevalidation 

Prior  to  validation,  a  set  of  test  results  for  ACVC  Version  1.9  produced  by 
the  Rational  Environment  was  submitted  to  the  AVF  by  the  applicant  for 
review.  Analysis  of  these  results  demonstrated  that  the  compiler 
successfully  passed  all  applicable  tests,  and  the  compiler  exhibited  the 
expected  behavior  on  all  inapplicable  tests. 


3-5 


TEST  INFORMATION 


3*7.2  Test  Method 

Testing  of  the  Rational  Environment  using  ACVC  Version  1.9  was  conducted 
on-site  by  a  validation  team  from  the  AVF.  The  configuration  consisted  of 
a  Rational  Architecture  (R1000)  operating  under  Rational  Environment, 
Version  D_10_8_6. 

A  magnetic  tape  containing  all  tests  except  for  withdrawn  test3  and  tests 
requiring  unsupported  floating-point  precisions  was  taken  on-site  by  the 
validation  team  for  processing.  Tests  that  make  use  of 
implementation-specific  values  were  customized  before  being  written  to  the 
magnetic  tape.  Tests  requiring  modifications  during  the  prevalidation 
testing  were  included  in  their  modified  form  on  the  magnetic  tape. 

The  contents  of  the  magnetic  tape  were  loaded  directly  onto  the  host 
computer.  After  the  test  files  were  loaded  to  disk,  the  full  set  of  tests 
was  compiled  on  the  Rational  Architecture  (R1000),  and  all  executable  tests 
were  linked  and  run.  Results  were  printed  from  the  host  computer. 

The  compiler  was  tested  using  command  scripts  provided  by  Rational  and 
reviewed  by  the  validation  team.  The  compiler  was  tested  using  all  default 
switch  settings  except  for  the  following; 


Switch 

Create_Subprogram_Specs=FALSE 

Page_Limit=8000 

Retain_DeltaO_Compatibility 


Effect 

Do  not  create  separate  subprogram 
specifications  when  a  subprogram 
body  is  compiled. 

Set  dynamic  page  limit. 

Do  not  create  code  compatible  with 
the  previous  ACVC  version. 


Tests  were  compiled,  linked,  and  executed  (as  appropriate)  using  two  host 
and  target  computers.  Test  output,  compilation  listings,  and  job  logs  were 
captured  on  magnetic  tape  and  archived  at  the  AVF.  The  listings  examined 
on-site  by  the  validation  team  were  also  archived. 


3.7.3  Test  Site 

Testing  was  conducted  at  Santa  Clara,  CA  and  was  completed  on  4  May  1988. 


APPENDIX  A 


DECLARATION  OF  CONFORMANCE 


Rational,  Inc.  has  submitted  the  following  Declaration 
of  conformance  concerning  the  Rational  Environment. 
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DECLARATION  OF  CONFORMANCE 


Compiler  Implementor:  Rational 

Ada®  Validation  Facility:  ASD/SCOL,  Wright-Patterson  AFB,  OH  45433-6503 
Ada  Compiler  Validation  Capability  (ACVC)  Version:  1.9 

Base  Configuration 


Base  Compiler  Name:  Rational  Environment  Version:  D_10_8_6 

Host  Architecture:  R1000®  Series  200 

Operating  System:  Rational  Environment  Version  D_10_8_6 
Target  Architecture:  R1000  Series  200 

Operating  System:  Rational  Environment  Version  D_10_8_6 

Implementor’s  Declaration 

I.  the  undersigned,  representing  Rational,  have  implemented  no  deliberate  extensions  to  the  Ada  Language  Standard 
ANSI/MIL-STD-1815A  in  the  compiler  listed  in  this  declaration.  I  declare  that  Rational  is  the  owner  of  record  of 
the  Ada  language  compiler  listed  above  and,  as  such,  is  responsible  for  maintaining  said  compiler  in  conformance  to 
ANSI/MIL-STD-1815A.  All  certificates  and  registrations  for  the  Ada  language  compiler  listed  in  this  declaration 
shall  be  made  only  in  the  owner’s  corporate  name. 


Date : 


/IVv;  t./^S  -  jUcJJ 

Walter  A.  wallach,/Manaaer,  Software  Test 

/  /  / 

Owner’s  Declaration 


.  4 


ft-  *•  V 


r.  ' 


I,  the  undersigned,  representing  Rational,  take  full  responsibility  for  the  implementation  and  maintenance  of  the  Ada 
compiler  listed  above,  and  agree  to  the  public  disclosure  of  the  final  Validation  Summary  Report  I  further  agree  to 
continue  to  comply  with  the  Ada  trademark  policy,  as  defined  by  the  Ada  Joint  Program  Office.  I  declare  that  all  of 
the  Ada  language  compilers  listed,  and  their  hostAarget  performance  are  in  compliance  with  the  Ada  Language 
Standard  ANSI/MEL'STD-1815A. 


/ 


//  J 


Date : 


•  A  A  ' 

,-y 


Walter  A.  Wallachv 


anager, 


Software  Test 

/ 


®Ada  is  a  registered  trademark  of  the  United  States  Government  (Ada  Joint  Program  Office). 
®R1000  is  the  registered  trademark  of  Rational. 
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APPENDIX  F  OF  THE  ADA  STANDARD 


The  only  allowed  implementation  dependencies  correspond  to 
implementation-dependent  pragmas,  to  certain  machine-dependent  conventions 
as  mentioned  in  chapter  13  of  the  Ada  Standard,  and  to  certain  allowed 
restrictions  on  representation  clauses.  The  implementation-dependent 
characteristics  of  the  Rational  Environment,  Version  D_10_8_6  are  described 
in  the  following  sections,  which  discuss  topics  in  Appendix  F  of  the  Ada 
Standard.  Implementation-specific  portions  of  the  package  STANDARD  are 
also  included  in  this  appendix. 


package  STANDARD  is 
•  •  • 

type  INTEGER  is  range  -214748364?  ..  2147483647; 

type  LONG_INTEGER  is  range  (-2«»63) .  .(2«*63-1) ; 

type  FLOAT  is  digits  15  range  -1.7977E308  ..  1.7977E308; 

type  DURATION  is  delta  2.0*»(-15)  range  -4.294967296000E+09  .. 

4.294967296000E+09; 

•  •  • 

end  STANDARD; 
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Appendix  F  for  the  R1000  Target 


This  section  of  the  Reference  Manual  for  the  Ada  Programming  Language  is  Ap¬ 
pendix  F  for  the  Rational  Environment,  the  Rational  architecture,  and  the  Riooo 
target.  This  appendix  describes  the  following  implementation-dependent  features: 

•  Compilation 

•  The  predefined  language  environment 

•  Attributes 

•  Pragmas 

•  Representation  clauses 

•  Chapter  14  I/O 

•  Limits 

Compilation 

The  following  sections  introduce  some  of  the  concepts  that  underlie  the  Rational  En¬ 
vironment  compilation  system  and  provide  a  summary  of  the  separate  compilation 
rules  for  Ada  units  in  the  Environment. 

Unit  States 

The  Rational  Environment  provides  an  integrated  representation  of  programs,  in¬ 
dependent  of  their  compilation  state.  In  the  Environment,  no  distinction  is  made 
•  between  source  code,  object  code,  or  other  implementation-dependent  representa¬ 
tions. 

In  the  Environment,  each  Ada  unit  can  be  in  one  of  four  basic  states,  ranging  from 
archived,  the  lowest  state,  to  coded,  the  highest  state.  Transforming  a  program  to 
the  state  in  which  it  can  be  executed  consists  of  promoting  all  of  its  units  from  the 
source  state  (or  from  the  archived  state)  to  the  coded  state;  finally,  promoting  a 
command  that  references  the  program  will  execute  it.  Each  of  the  states  is  described 
in  more  detail  below: 

•  Arthived:  The  image  of  the  unit  cannot  be  edited.  Units  in  this  state  also  do  not 
have  the  definition  capability  and  structure-oriented  highlighting  that  is  available 
to  units  in  the  source,  installed,  and  coded  states.  Units  can  be  put  in  the  archived 
state  to  save  space. 
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•  Source :  The  image  of  the  unit  can  be  edited.  Other  units  that  reference  it  (in 
the  Ada  sense)  cannot  be  in  a  state  higher  than  the  source  state. 

•  Installed The  unit  has  been  syntactically  and  semantically  checked  according  to 
the  definition  of  the  Ada  language.  Other  units  can  now  reference  it  (in  the  Ada 
sense);  that  is,  they  can  be  promoted  from  the  source  state  to  higher  states. 

•  Coded:  Code  has  been  generated  for  the  unit,  and  the  unit  can  be  executed  from 
a  Command  window  (if  the  unit  is  Riooo  code). 

freatment  of  Generics 

Because  the  Rational  Environment  and  the  Rational  architecture  do  not  depend  on 
macro  expansion  approaches  to  compile  generics,  the  specification  and  the  body  of 
a  generic  are  not  required  to  be  compiled  at  the  same  time.  Bodies  of  generics  can 
be  changed  without  making  the  instantiations  of  these  generics  obsolete. 

If  the  formal  part  of  a  generic  contains  private  (or  limited  private)  types,  certain 
additional  implicit  dependencies  among  the  specification,  body,  and  instantiations  of 
a  generic  may  be  introduced  (see  Section  13.3.2  of  the  Reference  Manual  for  the  Ada 
Programming  Language).  The  effect  of  these  implicit  dependencies  is  described  more 
fully  in  'Installation,”  below,  and  in  the  discussion  of  the  Must-B«_Constrained 
pragma  in  'Pragmas,*  later  in  this  section. 

Installation 

Installation  ordering  rules  follow  Ada’s  separate  compilation  rules.  Specs  must  be 
installed  before  their  corresponding  bodies  are  installed.  Subunits  must  be  installed 
after  their  parents  are  installed.  A  unit  spec  must  be  installed  before  another  unit 
that  refers  to  it  can  be  installed.  Bodies  can  be  changed  without  making  other  units 
that  refer  to  their  specification  obsolete. 

If  the  formal  part  of  a  generic  contains  private  (or  limited  private)  types,  certain 
additional  implicit  installation  dependencies  among  the  specification,  body,  and 
instantiations  of  a  generic  may  be  introduced  (see  Section  13.3.2  of  the  Reference 
Manual  for  the  Ada  Programming  Language). 

If  the  specification  and  body  of  such  a  generic  are  installed,  and  if  the  body  contains 
language  constructs  that  would  require  constrained  actuals  for  the  formal  private 
for  limited  private)  types,  instantiations  that  do  not  provide  constrained  actuals 
lor  these  formals  cannot  be  installed  after  this  point  (semantic  errors  will  be  gen- 
erated).  If,  on  the  other  hand,  the  specification  for  such  a  generic  and  at  least  one 
instantiation  with  unconstrained  actuals  for  the  formals  have  been  installed,  the 
body  for  the  generic  cannot  then  be  installed  if  it  contains  language  constructs  that 
would  require  constrained  actuals  (semantic  errors  will  be  generated). 

The  Environment  supports  the  Must-Be- Constrained  pragma,  which  can  ba  used 
to  provide  more  explicit  control  over  the  treatment  of  generic*  with  formals  that 
are  private  (or  limited  private).  More  information  is  available  in  the  description  of 
the  Must_Be-Constrained  pragma  in  'Pragmas,”  later  in  this  section. 
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It  is  always  legal  for  a  generic  actual  parameter  to  be  a  type  with  discriminants 
if  the  discriminants  have  default  values.  In  generic  unit  instantiation,  the  Ratio¬ 
nal  Environment  treats  such  actual  parameters  as  if  they  were  constrained  types. 
This  conforms  to  the  requirements  of  AJ -00037  (a  ruling  by  the  Ada  board  on  the 
interpretation  of  the  LEM). 

Literal  declarations  outside  the  bounds  of  the  Long-Integer  type  are  rejected  at 
installation  time.  The  bounds  of  Long-Integer  are  System.Min-Int  ..  System.Max- 
-Int. 

A  parameterless  function  having  the  same  name  and  type  as  an  enumeration  literal 
(declared  in  the  same  scope)  is  rejected  at  installation  time.  This  conforms  to 
Al-00330  (a  ruling  by  the  Ada  board  on  the  interpretation  of  the  LRM). 

Incremental  Operations  on  Installed  Units 

The  Rational  Environment  supports  the  following  incremental  changes  to  units  in 
the  installed  state: 

•  New  declarations  that  are  upwardly  compatible  (based  on  Ada  semantics)  can 
be  inserted.  Existing  declarations  with  no  dependents  can  be  deleted  or  demoted 
from  installed  state  to  source  state,  edited,  and  then  reinstalled. 

•  New  statements  can  be  inserted.  Existing  statements  can  be  deleted  or  demoted 
to  source  state,  edited,  and  then  reinstalled. 

•  New  context  clause  items  can  be  inserted  if  they  are  upwardly  compatible  (based 
on  Ada  semantics).  Existing  context  clause  items  with  no  dependents  can  be 
deleted  or  demoted  from  installed  state  to  source  state,  edited,  and  then  rein¬ 
stalled. 

•  New  stand-alone  comments  (on  lines  by  themselves)  can  be  inserted.  Existing 
stand-alone  comments  can  be  deleted  or  demoted  from  installed  state  to  source 
state,  edited,  and  then  reinstalled. 

Incremental  insertion,  deletion,  and  editing  of  stand-alone  comment  lines  is  always 
allowed. 

Incremental  operations  are  not  allowed  for  two-part  types,  generic  formal  parts, 
or  generic  specifications  with  installed  instantiations.  Incremental  operations  for 
declarations  are  also  supported  only  for  manipulations  of  the  entire  declaration, 
not  for  component  parts. 

Coding 

Code  is  generated  for  a  unit  when  the  body  of  the  unit  is  promoted  to  the  coded 
state.  Promoting  a  specification  to  coded  does  not  result  in  the  generation  of 
any  code.  Code  is  generated  to  elaborate  declarations  in  a  specification  when  the 
corresponding  body  is  promoted  to  coded.  Promoting  a  specification  to  coded 
results  in  information  being  computed  about  the  specification  that  allows  clients  to 
be  coded. 
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Coding  order  differs  in  some  respects  from  installation  order.  A  library  unit  specifi¬ 
cation  must  be  coded  before  its  body  can  be  coded.  Package,  generic  package,  and 
task  subunits  are  coded  before  their  parents  are  coded.  Subprogram  and  generic 
subprogram  subunits  are  coded  after  their  parents  are  coded.  Library  unit  specifi¬ 
cations  must  be  coded  before  any  clients  can  be  coded.  A  main  program  body  can 
be  coded  only  after  every  specification  and  body  in  the  closure  of  the  main  program 
has  been  coded.  The  system  may  optimise  these  strict  ordering  rules  when  it  can 
make  use  of  information  from  previous  promotions. 

Incremental  Operations  on  Coded  Units 

The  Rational  Environment  supports  the  following  incremental  changes  to  units  in 
the  coded  state: 

•  In  a  library  unit  specification,  new  declarations  that  are  upwardly  compatible 
(based  on  Ada  semantics)  can  be  inserted.  Existing  declarations  with  no  de¬ 
pendents  can  be  deleted,  or  they  can  be  edited  and  reinserted.  Because  the 
elaboration  code  for  the  declarations  in  a  specification  is  associated  with  the  cor¬ 
responding  body,  incremental  insertions  or  deletions  in  a  library  unit  specification 
result  in  the  demotion  of  the  corresponding  body  to  the  installed  state. 

•  In  a  library  unit  specification,  pragmas  can  be  incrementally  inserted,  deleted, 
or  edited  only  if  all  declarations  to  which  the  pragma  refers  are  simultaneously 
inserted,  deleted,  or  edited  within  the  same  insertion  point. 

•  New  context  clauses  that  are  upwardly  compatible  (based  on  Ada  semantics)  can 
be  inserted  only  if  the  units  named  in  the  context  clause  are  coded.  Existing 
context  clauses  with  no  dependents  can  be  deleted,  or  they  can  be  edited  and 
then  reinserted.  Incremental  insertion  or  deletion  of  context  clauses  results  in  the 
demotion  of  any  dependent  main  programs. 

•  Insertion,  deletion,  and  editing  of  comments  are  allowed  in  all  coded  units. 

AH  restrictions  on  incremental  insertions,  deletions,  and  editing  of  units  in  the 
installed  state  also  apply  to  units  in  the  coded  state. 


The  Predefined  Language  Environment 

The  following  material  uescribes  the  predefined  library  units  (all  in  the  Ratio¬ 
nal  Environment  Reference  Manual,  PT):  package  Standard,  package  System,  the 
Unchecked-Deallocation  procedure,  and  the  Unchecked-Conversion  function. 
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Padkmge  Standard 

Package  Standard  defines  all  of  the  predefined  identifiers  in  the  language. 

package  Standard  is 

type  Boolean  is  (False,  True); 
for  Boolean’Size  use  1; 

type  Integer  is  range  -2—31-1  ..  2—31-1; 

type  Long_ Integer  is  range  (-2— S2  -  2—62)  ..  (2—6 2  -  1  ♦  2— 62); 

-2—63  . .  2—63-1 

type  Float  is  digits  IS  range  (2.0—1023)  -  (2.0—97)  (2.0—1023).. 

-  {(2.0—1023)  -  (2.0—97)  ♦  (2.0—1023)); 
—  -1.7977E308  ..  1.7977E308; 

type  Character  is  (NKjI,  ....  Del); 
for  Character  use  (0,  ....  127); 
for  Character ’Size  use  8; 

package  Ascii  is  ...  end  Ascii; 

subtype  Natural  is  Integer  range  0  ..  Integer 'Last ; 
subtype  Positive  is  Integer  range  1  ..  Integer ’Last ; 

type  String  is  array  (Positive  range  O)  of  Character; 

type  Duration  is  delta  2.0— (-IS) 

- 3.0S17S7812S00E-05 

range  -(2.0—32)  ..  (2.0—32)  -  (2.0— (-1S)); 

- 4 . 294967 296000E +09  ..  4.29496729G000E*0S 


Constraint .Error 

Numenc.Error 

Program.Error 

Storage.Error 

Tasking.Error 

end  Standard; 


exception; 

exception; 

exception; 

exception; 

exception; 


For  additional  information,  see  the  reference  entries  in  the  Rational  Environment 
Reference  Manual,  PT,  package  Standard. 
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Package  System 

Package  System  defines  various  implementation-dependent  types,  objects,  and  sub¬ 
programs. 

Other  declarations  defined  in  package  System  are  reserved  for  internal  use  and  are 
not  documented.  These  declarations  should  not  be  required  for  users  of  the  Rational 
Environment. 

package  System  is 

type  Name  is  (R1000); 

System.Name  :  constant  Name  :*  R1000; 

Bit  :  constant  :*  1; 

StorageJJnit  :  constant  :*  1  •  Bit; 

IUord_Size  :  constant  :*  128  •  Bit; 

Byte.Size  :  constant  ;»  8  •  Bit; 

Megabyte  :  constant  :s  {2  ••  20}  •  Byte.Size; 

Memory.Size  :  constant  :*  32  *  Megabyte; 


—  System-Dependent  Named  Numbers 

Min.lnt  :  constant  :*  Long.lnteger 'Pos  (Long_lnteger ’First} ; 

Max.lnt  ;  constant  :  =  Long. Integer 'Pos  (Long.lnteger ’Last) ; 

Max.Digits  :  constant  :*  IS; 

Max.Mantissa  :  constant  :*  S3; 

Fine.Delta  ;  constant  :*  1.0  /  (2.0  **  S3); 

Tick  :  constant  :s  200.0E-B; 

subtype  Priority  is  Integer  range  0  ..  5; 


type  Byte  is  neui  Natural  range  0  .  .  25S; 

type  Byte.String  is  array  (Natural  range  O)  of  Byte; 

—  Basic  units  of  transmission/reception  to/from  10  devices 
—  The  following  exceptions  are  raised  by  Lhchecked_Conversion  or 
Unchecked.Convers ions 

Tv^je.Error  :  exception; 

Capability.Error  :  exception; 
kssertion.Error :  exception;  • 
end  System; 

For  additional  information,  see  the  reference  entries  in  the  Rational  Environment 
Reference  Manual,  PT,  package  System. 

For  additional  information  on  the  exceptions,  see  the  reference  entries  in  the  Ratio¬ 
nal  Environment  Reference  Manual,  PT,  Unchecked-Conversion  function  and  pack¬ 
age  Unchecked- Conversions. 
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Unchecked-Deallocation  Procedure 

The  Unchecked-Deallocation  procedure  is  used  to  perform  unchecked  storage  de¬ 
allocation  for  values  designated  by  access  types  that  are  not  tasks  and  do  not  contain 
components  that  are  tasks  or  pointers  to  tasks. 

Its  formal  parameter  list  is: 
generic 

type  Object  is  limited  private; 
type  Name  is  access  Object; 
procedure  Unchecked_Deallocation{X  :  in  out  Name); 

The  Unchecked-Deallocation  procedure  assigns  null  to  X  and  reclaims  storage  for 
the  object  it  designates. 

Deallocation  is  not  allowed  if  the  designated  type  of  the  access  type  is  a  task  type  or 
an  access  to  a  task  type  or  if  it  contains  such  subcomponents.  When  the  designated 
type  or  its  subcomponents  is  a  generic  formal  or  a  private  type  exported  from  a  sub¬ 
system  specification  having  a  closed  private  part,  it  is  not  possible  to  determine  at 
compilation  time  whether  deallocation  will  be  performed.  The  AUows-Deallocation 
function  in  ITools  can  be  used  at  run  time  to  determine  whether  deallocation  will 
be  performed. 

For  additional  information,  see  the  reference  entries  in  the  Rational  Environment 
Reference  Manual,  PT,  package  Unchecked-Deallocation. 

Unchecked-Conversion  Function 

The  Unchecked-Conversion  generic  function  converts  objects  of  one  type  to  objects 
of  another  type. 

Its  formal  parameter  list  is: 
generic 

type  Source  is  limited  private; 
type  Target  is  limited  private; 
function  Uncheck ed_Coovers ion  (S  :  Source)  return  Target; 

The  Source  type  is  the  type  of  the  source  object  bit  pattern  that  is  to  be  converted 
to  the  Target  type. 

A  faster,  package  version  of  the  Unchecked- Conversion  function  can  be  found  in 
the  Rational  Environment  Reference  Manual,  PT,  package  Unchecked-Conversions. 

For  additional  information  and  examples,  see  the  reference  entries  in  the  Rational 
Environment  Reference  Manual,  PT,  Unchecked- Conversion  function  and  package 
Unchecked-Conversions. 

Package  Machine-Code 

Package  Machine- Code  is  not  currently  supported. 
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Attributes 

The  Environment  supports  no  implementation-dependent  attributes  other  than 

those  defined  in  Appendix  A  of  the  Reference  Manual  for  the  Ada  Programming 

Language.  The  following  clarifications  and  restrictions  complement  the  descriptions 

provided  in  Appendix  A: 

•  ’Address:  This  attribute  is  not  supported;  any  number  returned  is  meaningless. 

•  ’First-Bit:  This  attribute  is  not  supported. 

•  ’Last-Bit:  This  attribute  is  not  supported. 

•  ’Position:  This  attribute  is  not  supported. 

•  ’Storage-Size:  ’Storage-Size  is  meaningful  only  when  applied  to  access  types  or 
access  subtypes,  in  which  case  it  returns  the  number  of  storage  units  reserved  for 
the  collection  associated  with  the  base  type  for  the  access  type  or  subtype.  The 
value  returned  by  ’Storage-Size  is  meaningless  for  task  types  or  task  objects. 


Pragmas 

The  Environment  supports  pragmas  for  application  software  development  in  addi¬ 
tion  to  those  defined  in  Appendix  B  of  the  Reference  Manual  for  the  Ada  Program¬ 
ming  Language.  They  are  described  below,  along  with  additional  clarifications  and 

restrictions  for  the  pragmas  defined  in  Appendix  B: 

•  Controlled:  Because  the  implementation  does  not  support  automatic  garbage 
collection,  this  pragma  is  always  implicitly  in  effect  for  the  Riooo  target. 

•  Disable-Deallocation  (X):  This  pragma  is  used  to  disable  deallocation  for  type 
X,  where  X  is  the  name  of  the  type  for  which  you  want  to  disable  deallocation. 

•  Enable-Deallocation  (X):  This  pragma  is  used  with  the  Unchecked-Deallocation 
generic  to  enable  deallocation  for  type  X,  where  X  is  the  name  of  the  access  type 
for  which  you  want  to  reclaim  storage.  This  pragma  can  also  be  used  on  a  generic 
formal  to  indicate  that  it  should  be  deallocatable. 

•  Inline:  This  pragma  currently  has  no  effect  for  the  Riooo  target. 

•  Interface:  The  Environment  does  not  currently  support  the  execution  of  other  lan¬ 
guages  on  the  Rational  architecture.  To  support  development  of  target-dependent 
software  containing  this  pragma,  however,  the  Environment  recognizes  the  pragma. 
The  effect  of  this  pragma  is  that  a  body  is  implicitly  built  that  will  raise  the  Pro¬ 
gram-Error  exception  if  the  subprogram  is  executed  when  the  Ignore-Interface- 
-Pragmas  library  switch  is  false. 

•  List:  This  pragma  currently  has  no  effect. 

•  Loaded-Main:  This  pragma  is  generated  by  the  Environment  to  specify  that  a 
unit  is  a  code-only  unit.  When  padsge  Archive  ( Rational  Environment  Reference 
Manual ,  LM)  is  used  to  generate  a  code-only  unit,  a  Main  pragma  is  converted  to 
a  Loaded-Main  pragma  automatically. 
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•  Mala:  This  pragma  is  used  to  cause  the  Environment  to  preload  the  object  code 
for  the  compilation  units  referenced  by  a  main  program.  Normally  this  loading 
is  done  when  a  Command  window  referencing  these  units  is  promoted. 

The  pragma  takes  no  parameters  and  should  be  placed  immediately  after  the 
declaration  for  the  specification  or  the  body  of  the  main  subprogram.  Note  that 
there  is  a  restriction  that  the  parameters  to  subprograms  containing  this  pragma 
must  be  of  types  defined  in  package  Standard,  paclage  System,  or  any  other 
predefined  package  in  the  Environment  directory  structure  provided  by  Rational. 

The  pragma  can  be  placed  only  after  library  units.  The  loading  takes  place  when 
the  body  of  the  main  program  is  promoted  to  the  coded  state.  For  this  to  occur, 
all  compilation  units  referenced  by  the  main  program  must  be  in  the  coded  state. 

When  subsystems  are  used,  the  loading  of  subprograms  containing  a  Main  pragma 
will  use  the  current  activity  to  determine  the  actual  subsystem  implementations 
that  will  compose  the  main  program.  Once  the  loading  has  taken  place,  the 
execution  of  the  main  program  can  occur  without  requiring  an  activity. 

Executing  a  main  program  containing  this  pragma  first  causes  the  closure  of  the 
library  units  referenced  by  the  main  program  to  be  elaborated.  The  program  is 
then  executed.  If  there  are  references  in  the  Command  window  to  units  in  the 
closure  of  the  main  program  other  than  within  the  main  program,  these  references 
will  cause  their  own  copy  of  these  units  to  be  elaborated.  These  elaborated 
instances  will  be  separate  from  those  of  the  main  program’s  elaboration. 

•  Memory _Sise:  This  pragma  has  no  effect. 

•  Must-Be-Constrained:  This  pragma  is  used  in  a  generic  formal  part  to  indicate 
that  formal  private  (and  limited  private)  types  must  be  constrained  or  need  not 
be  constrained. 

This  pragma  allows  programmers  to  declare  explicitly  how  they  intend  to  use  the 
formals  in  the  specification  for  a  generic.  Then  the  Environment  can  check  that 
any  instantiations  of  the  generic  that  are  installed  before  the  body  of  the  generic 
is  installed  are  legal. 

The  pragma’s  syntax  is: 

pragma  Must_Be_Cons trained  ([<conc&  *>]  <type_i^,  ...); 

The  condition  can  be  either  yes  or  no  and  defaults  to  the  previous  value  ( which  is 
initially  yes)  if  omitted.  The  type  identifier  must  be  a  formal  private  (or  limited 
private)  type  defined  in  the  same  formal  part  as  the  pragma. 

IS  the  condition  value  of  no  is  specified,  any  use  b  the  body  that  requires  a 
constrained  type  will  be  flagged  as  a  semantic  error.  If  yes  is  specified,  any 
instantiations  that  contab  actuals  that  require  constrained  types  will  be  flagged 
with  semantic  errors  if  the  actuals  are  not  constrained. 

•  Opea-Private_Part:  This  pragma  is  used  b  conjunction  with  subsystems  to 
bdicate  that  a  subsystem  interface  has  an  open  private  part. 

•  Optimize:  This  pragma  currently  has  no  effect. 

•  Pack:  All  records  and  arrays  are  stored  packed  b  the  minimum  number  of  bits 
that  they  require,  unless  explicitly  overridden  by  a  length  representation  clause 
(see  ‘Representation  of  Objects,*  below).  Thus,  this  pragma  has  no  effect. 
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•  Page:  This  pragma  la  uaed  by  the  print  spooler  to  cause  a  new  page.  The  pragma 
will  be  the  last  line  on  the  page.  The  next  line  will  be  printed  on  the  next  page. 

•  Page-Limit  fX):  This  pragma  specifies  that  the  page  limit  for  the  current  job 
should  be  no  less  than  X,  where  X  is  a  number.  This  pragma  overrides  the  library 
switch  Page-Limit,  which  overrides  the  session  switch  Default-Job-Page-Limit. 
For  a  more  detailed  description,  see  the  reference  entries  in  the  Rational  Environ¬ 
ment  Reference  Manual,  SMU,  System-Utilities. Get-Page-Counts  and  System* 
-Utilities. Set-Page-Limit  procedures. 

•  Priority:  Priorities  can  be  specified  only  inside  a  task  or  a  library  main  program. 
If  multiple  priorities  are  specified,  only  the  first  priority  specified  is  used.  The 
default  priority  is  2. 

•  Private-Eyes-Only*.  This  pragma  is  used  m  conjunction  with  subsystems  to  in¬ 
dicate  that  items  following  the  pragma  in  a  context  clause  are  required  only  in 
the  private  part  of  the  subsystem  interface. 

•  Shared:  This  pragma  currently  has  no  effect. 

•  Storage-Unit:  The  only  legal  storage  unit  value  for  the  Rational  architecture  is 

1. 

•  Suppress:  This  pragma  currently  has  no  effect. 

•  System-Name:  The  only  legal  system  name  is  Riooo. 

Representation  Clauses 

The  Rational  Environment  does  not  currently  provide  a  complete  implementation 
for  representation  specifications.  To  facilitate  host /target  development  of  target- 
dependent  code  containing  representation  clauses,  nowever,  the  Environment  will 
optionally  compile  unsupported  representation  clauses  when  the  Ignore-Unsupport- 
ed-Rep-Specs  library  switch  is  set  to  true. 

Representation  of  Objects 

The  Environment  follows  some  simple  rules  for  representing  objects  in  virtual  mem¬ 
ory,  and  these  rules  can  be  used  to  create  objects  with  arbitrary  bit  images  without 
using  representation  clauses. 

For  discrete  types  as  components  of  structures  (records  and  arrays),  the  Rational 
architecture  representation  will  allocate  the  minimum  amount  of  space  to  represent 
the  range  imposed  by  the  (possibly  dynamic)  constraints  of  the  applicable  subtype, 
using  a  two’s  complement  representation  that  is  sero  based. 
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For  example: 

subtype  Binary  is  Integer  range  0  ..  1;  —  uses  1  bit 

subtype  A  is  Integer  range  -3  . 120;  —  uses  8  bits 

type  B  is  new  Natural  range  0  ..  S3;  —  uses  E  bits 

type  C  is  new  Natural  range  1022  ..  1023;  —  uses  10  bits 

type  0  is  {X,  Y,  Z);  —  uses  2  bits 

—  X  s>  0 
—  Y  =>  1 
—  Z  «>  2 

type  E  is  (X);  —  uses  0  bits 

Size  representation  clauses  are  supported  for  all  enumeration  types  that  are  not 
declared  with  two-part  declarations.  Thus,  the  above  rules  can  be  overridden.  A 
specific  example  is  the  representation  for  the  Standard.Character  type,  which  takes 
8  bits  instead  of  7  because  of  a  size  representation  clause. 

For  records  without  discriminants,  the  Rational  architecture  stores  the  fields  in  the 
order  specified  in  the  type  declaration,  using  the  minimum  space  required  for  each 
field,  with  no  additional  Environment-generated  fields. 

type  Rl  is  —  uses  8+E+l  ■  15  bits 

record 

Field-l  :  A; 

Field.2  :  B; 

Field_3  :  Boolean; 
end  record; 

type  R2  is  —  uses  1S+1  *  IS  bits 

record 

Field.l  :  Rl; 

Field_2  :  Boolean; 
end  record; 

For  constrained  array  types,  the  Rational  architecture  stores  the  elements  packed, 
using  the  minimum  space  for  each  element,  with  no  additional  fields. 

type  A1  is  array  (1..N)  of  Rl;  —  uses  15»N  bits 

—  N  need  not  be  static 

type  A2  is  arrwy  (0..10)  of  Boolean;  —  uses  11  bits 

type  R3  is  —  uses  15+11+2  =  28  bits 

record 

Field.l  :  Rl; 

Field.2  :  A 2; 

Field_3  :  D; 
end  record; 
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Lea  gib  Clauses 

•  'Size:  The  Rational  architecture  support*  the  'Size  attribute  !ot  discrete  types 
only.  These  types  are  further  limited  in  that  they  can  have  only  a  single  dec¬ 
laration  point  (that  is,  they  cannot  be  incomplete  or  private  types).  The  size 
specified  must  be  less  than  or  equal  to  64. 

•  'Storage-Size  for  collections:  The  default  collection  size  is  2**24  bits.  The  storage 
size  for  a  collection  can  range  from  2**8  to  2**32  bits.  The  storage  size  for  a 
collection  determines  the  number  of  bits  required  to  represent  access  types  for  the 
collection  (for  example,  for  collections  of  the  default  2* *24  bit  size,  the  number 
of  bits  required  to  store  objects  of  the  access  type  that  is  associated  with  this 
collection  is  24).  Only  types  with  single  declaration  points  can  have  storage  size 
specified  (that  is,  they  cannot  be  incomplete  or  private  types). 

Storage  sizes  for  collections  must  be  specified  as  static  expressions. 

•  'Storage-Size  for  tasks:  Because  each  task  in  the  Rational  architecture  gets  its 
own  virtual  address  space,  storage  size  specifications  for  tasks  are  meaningless 
and,  consequently,  are  not  supported. 

•  ’Small:  This  length  clause  is  not  currently  supported. 

Enumeration  Representation  Clauses 

No  enumeration  representation  clauses  are  currently  supported. 

Record  Representation  Clauses 

No  record  representation  clauses  are  currently  supported. 

Address  Clauses 

No  address  clauses  are  currently  supported. 

Interrupts 

Because  interrupts  do  not  exist  in  the  Rational  architecture,  these  representation 
clauses  are  not  needed  and,  consequently,  are  not  supported. 

Chapter  14  I/O 

The  Environment  supports  all  of  the  I/O  packages  defined  in  Chapter  14  of  the  Refer- 
tnet  Manual  for  the  Ada  Programming  Language ,  except  for  package  Low -Level— Io, 
which  is  not  needed.  The  Environment  also  provides  a  number  of  other  I/O  packages. 
The  packages  defined  in  Chapter  14,  as  well  as  the  other  I/O  packages  supported  by 
the  Environment,  are  more  fully  documented  in  the  Rational  Environment  Refer¬ 
ence  Manual,  Text  Input/Output  (TIO)  and  Data  and  Device  Input/Output  (DIO). 
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The  following  list  summarizes  the  implementation-dependent  features  of  the  Chap¬ 
ter  14  I/O  packages: 

•  Filenames:  Filenames  must  conform  to  the  syntax  of  Ada  identifiers.  They  can, 
however,  be  keywords  of  the  Ada  language. 

•  Form  parameter:  Depending  on  the  external  file  being  written  to,  this  parameter 
affects  the  way  terminals  and  Ada  units  are  read.  For  example,  it  can  specify 
whether  to  have  the  Page  pragma  read  with  the  Page_Pragma-Mapping  option. 

•  Instantiations  of  package  Direct-lo  and  package  SequentiaLIo  with  access  types: 
Such  instantiations  are  allowed.  If  files  are  created  or  opened  using  such  instan¬ 
tiations,  the  Use-Error  exception  is  raised. 

•  Count  type:  The  Count  type  for  package  Text  .Jo  and  package  Direct-lo  is  defined 
as: 

package  Text. I o  is 

type  Count  is  range  0  ..  1.000.000.000 ; 
end  Text.lo; 
package  Direct.Io  is 

type  Count  is  neui  Integer 

range  0  ..  Integer ’ Las t/Element.Type' Size; 

end  Direct.Io; 

•  Field  subtype:  The  Field  subtype  for  package  Text-Jo  is  defined  as: 

subtype  Field  is  Integer  range  0  ..  Integer ’Last ; 

•  Standard-Input  and  Standard-Output  files:  When  a  job  is  run  from  a  Command 
window,  these  files  are  the  interactive  input/output  windows  provided  by  the 
Rational  Editor.  When  a  job  Is  run  from  package  Program,  options  allow  the 
user  to  specify  what  Standard-Input  and  Standard-Output  will  be. 

•  Internal  and  external  files:  More  than  one  internal  file  can  be  associated  with  a 
single  external  file  for  input  only.  Only  one  Internal  file  can  be  associated  with  a 
single  external  file  for  output  or  isout. 

•  Sequential-^  and  Direct-lo  packages:  Package  Sequential-Io  can  ’;e  instantiated 
for  unconstrained  array  types  or  for  types  with  discriminants  without  default 
discriminant  values.  Package  Direct-lo  cannot  be  instantiated  for  unconstrained 
array  types  or  for  types  with  discriminants  without  default  discriminant  values. 

•  Terminators:  The  line  terminator  is  denoted  by  the  character  Ascii.Lf,  the  page 
terminator  is  denoted  by  the  character  Ascii.Ff,  and  the  end-of-file  terminator 
is  implicit  at  the  end  of  the  file.  A  line  terminator  directly  followed  by  a  page 
terminator  is  compressed  to  the  single  character  Ascii.Ff.  The  line  and  page 
terminators  preceding  the  file  terminator  are  implicit  and  do  not  appear  as  char¬ 
acters  in  the  file.  For  the  sake  of  portability,  programs  should  not  depend  on  this 
representation,  although  it  can  be  necessary  to  use  this  representation  when  im¬ 
porting  source  from  another  environment  or  exporting  source  from  the  Rational 
Environment. 
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•  Treatment  of  control  characters:  Control  characters,  other  than  the  terminators 
described  above,  are  passed  directly  to  and  from  files  to  application  programs. 

•  Concurrent  properties:  The  Chapter  14  I/O  packages  assume  that  concurrent 
requests  for  I/O  resources  will  be  synchronised  by  the  application  program  making 
the  requests,  except  for  package  Text-Jo,  which  will  synchronise  requests  for 
output. 

Limits 

The  following  package  specifies  the  absolute  limits  on  the  use  of  certain  language 
features: 

uiith  system; 
package  Limits  is 

Large  :  constant  : =  <some  very  large  nusber>; 

—  Scanner 

Wax .Line .Length  :  constant  :=  2S4 ; 

—  Semantics 

Max_Discriminants.ln_Constraint  :  constant  :  =  2S5; 

Max.Associations. In.Reeord.Aggregate  :  constant  :*  2So; 

Max.Fields.ln.Record.Aggregate  :  constant  :=  25S; 

Max.Formals.ln.Genenc  :  constant  :s  2So; 

Max .Nested. Con texts  ;  constant  : *  250; 

Max.Nested.Packages  :  constant  :s  Large; 

Max .Uni ts . I n.T  r ans i t i ve.Cl osure.Of  JDi th.Lis  ts 

:  constant  :=  Large; 

—  (limited  by  virtual  memory  stack  size) 

Max.Number _0f .Libraries  :  constant  :=  Large; 

—  Code  Generator 

Max. Indices. In. Array. Aggregate  :  constant  : =  64; 

Max_Parameters_ln_Call  :  constant  :=  253; 

Max.Expression.Nesting.Depth  :  constant  :=  Large; 

— -  (limited  by  virtual  memory  stack  size) 

Max.tAjr6er.0f  .Fields.  I  n.Records  :  constant  :=  253; 

Max_tAjn6er.0f.Entnes.ln_A  .Task  :  constant  :  =  253; 

Max.NLn6er.0f .Dimensions. I n_ An. Array  •:  constant  :  =  63; 

Max.Nes ting.Of .Subprograms _0r .Block s _ I n.A.Package 

:  constant  :»  14; 

—  Execution 

Max  .hkjnber  _0f  .Tasks  :  constant  :=  Large; 

—  (limited  by  available  disk  space) 

Max.Objeet.Size  :  constant  :=  (2“32) ‘System.  Bit; 

end  Limits; 
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Certain  tests  in  the  ACVC  make  use  of  implementation-dependent  values,  such 
as  the  maximum  length  of  an  input  line  and  invalid  file  names.  A  test  that 
makes  use  of  such  values  is  identified  by  the  extension  .TST  in  its  file 
name.  Actual  values  to  be  substituted  are  represented  by  names  that  begin 
with  a  dollar  sign.  A  value  must  be  substituted  for  each  of  these  names 
before  the  test  is  run.  The  values  used  for  this  validation  are  given 
below. 


Name  and  Meaning 


Value 


$BIG__ID1  (1.  .253  =>  *A*  f  254  =>  ’1') 

Identifier  the  size  of  the 

maximum  input  line  length  with 

varying  last  character. 

$BIG_ID2  (1..253  =>  ’A',  254  =>  *2  0 

Identifier  the  size  of  the 

maximum  input  line  length  with 

varying  last  character. 

$BIG_ID3  (1..126  =>  *A* , 127  =>  *3', 128. .254  =>  *A')) 

Identifier  the  size  of  the 

maximum  input  line  length  with 

varying  middle  character. 


$BIG_ID4  (1..126  =>  *  A  * , 1 27  =>  *3', 128.. 254  =>  ’A*)) 

Identifier  the  size  of  the 
maximum  input  line  length  with 
varying  middle  character. 


$BIG_INT_LIT 

An  integer  literal  of  value  298 
with  enough  leading  zeroes  so 
that  it  is  the  size  of  the 
maximum  line  length. 


(1..251  =>  *0*,  252.. 254  =>  "298") 
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Name  and  Meaning _ 

$BIG_REAL_LIT 

A  universal  real  literal  of 
value  690.0  with  enough  leading 
zeroes  to  be  the  size  of  the 
maximum  line  length. 

$8IG_STRING 1 

A  string  literal  which  when 
catenated  with  BIG_STRING2 
yields  the  image  of  BIG_ID1. 

$BIG_STRING2 

A  string  literal  which  when 
catenated  to  the  end  of 
BIG  STRING  1  yields  the  image  of 
BIG~ID1 . 

$8LANKS 

A  sequence  of  blanks  twenty 
characters  less  than  the  size 
of  the  maximum  line  length. 

$COUNT_LAST 

A  universal  integer 

literal  whose  value  is 

TEXT__I0 .  COUNT  ’  LAST . 

$FIELD_LAST 

A  universal  integer 

literal  whose  value  is 

TEX T_I0. FIELD’ LAST. 

$FILE_NAME_WITH_BAD_CHARS 

An  external  file  name  that 
either  contains  invalid 

characters  or  is  too  long. 

$FILE_NAME_WITH_WILD_CARD__CHAR 

An  external  file  name  that 
either  contains  a  wild  card 

character  or  is  too  long. 

$GREATSR_THANJ)URATION 

A  universal  real  literal  that 
lies  between  DURATION ’BASE ’LAST 
and  DURATION ' LAST  or  any  value 
in  the  range  of  DURATION. 


Value _ 

(1..248  s>  ’O’,  249. .254  =>  "69. OBI") 


(1..127  =>  ’A’} 


(1..126  =>  ’A’,  127  =>  ’1’) 


(1..234  =>  ’  ’) 


1000000000 


2147483647 


BAD  CHARACTERS&<>= 


WILDCARDSS 


5.0E09 
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Name  and  Meaning _ 

$GREATER_THAN_DURATI ON_B ASE_LAST 

A  universal  real  literal  that  is 
greater  than  DURATION*  BASE ' LAST . 

$ILLEGAL_EXTERNAL_FILE_NAME 1 

An  ""external  file  name  which 
contains  invalid  characters. 

$ILLEGAL_EXTERNAL_FILE_NAME2 

An  external  file  name  which 
is  too  long. 

$INTEGER_FIRST 

A  universal  integer  literal 

whose  value  is  INTEGER* FIRST. 

$INTEGER_LAST 

A  universal  integer  literal 

whose  value  is  INTEGER 'LAST. 

$INTEGER_LAST_PLUS_1 

A  universal  integer  literal 

whose  value  is  INTEGER 'LAST  +  1. 

$LESS_THAN_DURATION 

A  universal  real  literal  that 
lies  between  DURATION 'BASE 'FIRST 
and  DURATION 'FIRST  or  any  value 
in  the  range  of  DURATION. 

$LESS_THAN_DURATION_BASE_FIRST 

A  universal  real  literal  that  is 
less  than  DURATION 'BASE 'FIRST. 

$MAX_DIGITS 

Maximum  digits  supported  for 
floating-point  types . 

$MAX_IN_LEN 

Maximum  input  line  length 
permitted  by  the  implementation. 

$MAX_INT 

A  universal  integer  literal 
whose  value  is  SYSTEM .MAX_I NT. 

$MAX_INT_PLUSJ 

A  universal  integer  literal 
whose  value  is  SYSTEM. MAX  INT+1. 


Value _ 

5.0E09 

BAD_CHARACTERS&<>= 

STRING • ( 1 . . 1 00=> ' A ’ ) &STRING ’ ( 1 . . 1 00=> ' A ' ) 
&STRING ' ( 1 . . 100=>  *A’ ) 

-21^7^83647 

214748364? 

2147483648 

-5.0E09 

-5.0E09 

15 

254 

9223372036854775807 

9223372036854775808 
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Name  and  Meaning _ 

$HAX  JLEN  JQITJBASED,  LITERAL 

A  universal  integer  based 
literal  whose  value  is  2#11# 
with  enough  leading  zeroes  in 
the  mantissa  to  be  MAX__IN_L£N 
long. 

$MAX_L£N_REAL_BAS£D_LITERAL 

A  universal  real  based  literal 
whose  value  is  16:F.E:  with 
enough  leading  zeroes  in  the 
mantissa  to  be  MAX_IN_LEN  long. 

$MAX_STRINGJLITERAL 

A  string  literal  of  size 
MAX_IN_LEN ,  including  the  quote 
characters . 

$MIN_1NT 

A  universal  integer  literal 
whose  value  is  SYSTEM. MIN_INT. 

$NAME 

A  name  of  a  predefined  numeric 
type  other  than  FLOAT,  INTEGER, 
SHORT_FLOAT ,  SHORT_INTEGER , 

LONG_FLOAT,  or  LONG_INTEGER . 

$NEO_BASED_INT 

A  based  integer  literal  whose 
highest  order  nonzero  bit 
falls  in  the  sign  bit 
position  of  the  representation 
for  SYSTEM. MAX  INT. 


Value _ _ _ 

( 1.  .2  =>  "2:",  3. .251  =>  'O', 

252. .254  s>  "11:") 

(1..3  =>  "16:",  4. .250  =>  'O’, 

251. .254  =>  "F.E:") 

(1  =>  •"»,  2. .253  =>  ’A’,  254  =>  »"») 

-9223372036854775808 

NO_SUCH_TYPE 

1 6AFFFFFFFFFFFFFFFE# 
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Some  tests  are  withdrawn  from  the  ACVC  because  they  do  not  conform  to  the 
Ada  Standard.  The  following  27  tests  had  been  withdrawn  at  the  time  of 
validation  testing  for  the  reasons  indicated.  A  reference  of  the  form 
"Al-ddddd"  is  to  an  Ada  Commentary. 

1 .  B28003A:  A  basic  declaration  (line  36)  incorrectly  follows  a  later 

declaration . 

2.  E28005C:  This  test  requires  that  "PRAGMA  LIST  (ON);"  not  appear  in  a 
listing  that  has  been  suspended  by  a  previous  "PRAGMA  LIST  (OFF);"; 
The  Ada  Standard  is  not  clear  on  this  point,  and  the  matter  will  be 
reviewed  by  the  AJPO. 

3.  03*100^:  The  expression  in  line  168  yields  a  value  outside  the  range 
of  the  target  type  T,  but  there  is  no  handler  for  CONSTRAINTJERROR. 

4.  C35502P:  The  equality  operators  in  lines  62  and  69  should  be 

inequality  operators. 

5.  A35902C:  The  assignment  in  line  17  of  the  nominal  upper  bound  of  a 

fixed-point  type  to  an  object  raises  C0NSTRAINT_ERR0R,  for  that  value 
lies  outside  of  the  actual  range  of  the  type . 

6.  C35904A:  The  elaboration  of  the  fixed-point  subtype  on  line  28 

wrongly  raises  C0NSTRAINT_ERR0R,  because  its  upper  bound  exceeds  that 
of  the  type. 

7.  C3590**B:  The  subtype  declaration  that  is  expected  to  raise 

C0NSTRAINT_ERR0R  when  its  compatibility  is  checked  against  that  of 

various  types  passed  as  actual  generic  parameters,  may,  in  fact,  raise 
NUMERICJ3RR0R  or  C0NSTRAINT_ERR0R  for  reasons  not  anticipated  by  the 
test. 

8.  C35A03E  and  C35A03R!  These  tests  assume  that  attribute  ’MANTISSA 

returns  0  when  applied  to  a  fixed-point  type  with  a  null  range,  but 

the  Ada  Standard  does  not  support  this  assumption. 
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9.  C37213H:  The  subtype  declaration  of  SCONS  in  line  100  is  incorrectly 

expected  to  raise  an  exception  when  elaborated. 


10. 

C37213J:  The  aggregate 

C0NSTRAINT_ERR0R. 

in 

line  451 

incorrectly 

raises 

11. 

C37215C,  C37215E,  C37215G, 

and 

C37215H: 

Various  discriminant 

constraints  are  incorrectly  expected  to  be  incompatible  with  type 
CONS. 

12.  C38102C:  The  fixed-point  conversion  on  line  23  wrongly  raises 

C0NSTRAINTJ2RR0R . 

13.  C41402A:  The  attribute  1 ST0RAGE_SIZE  is  incorrectly  applied  to  an 
object  of  an  access  type. 

14.  C45332A:  The  test  expects  that  either  an  expression  in  line  52  will 

raise  an  exception  or  else  MACHINE_0VERFL0WS  is  FALSE.  However,  an 
implementation  may  evaluate  the  expression  correctly  using  a  type  with 
a  wider  range  than  the  base  type  of  the  operands ,  and 

MACHINE_OVERFLOWS  may  still  be  TRUE. 

15.  C45614C:  The  function  call  of  IDENT__INT  in  line  15  uses  an  argument 
of  the  wrong  type. 

16.  A74106C,  C85018B,  C87B04B,  and  CC 131  IBs  A  bound  specified  in  a 
fixed-point  subtype  declaration  lies  outside  of  that  calculated  for 
the  base  type,  raising  CONSTRAINT  ERROR.  Errors  of  this  sort  occur  at 
lines  37  &  59,  142  &  143,  1 6  &~48,  and  252  &  253  of  the  four  tests, 
respectively. 

17.  BC3105A:  Lines  159  through  1 68  expect  error  messages,  but  these  lines 
are  correct  Ada. 

18.  AD1A01A:  The  declaration  of  subtype  SINT3  raises  CONSTRAINT_ERROR  for 
implementations  which  select  INT'SIZE  to  be  16  or  greater. 

19.  CE2401H:  The  record  aggregates  in  lines  105  and  117  contain  the  wrong 
values . 

20.  CE3208A:  This  test  expects  that  an  attempt  to  open  the  default  output 
file  (after  it  was  closed)  with  mode  IN_FILE  raises  NAME_ERROR  or 
USE_ERR0R;  by  Commentary  AI-00048,  M0DE_ERR0R  should  be  raised. 
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